Vulnerability Database

308,926

Total vulnerabilities in the database

CVE-2022-38194

In Esri Portal for ArcGIS versions 10.8.1, a system property is not properly encrypted. This may lead to a local user reading sensitive information from a properties file.

  • Published: Aug 16, 2022
  • Updated: Nov 16, 2025
  • CVE: CVE-2022-38194
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
esri / portal_for_arcgis 10.8.1 10.8.1.x